Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
File:                     aaUdRFt2erm2YncC5KKzkE0gP3c.cer (raw, json)
Hash identifier:          1aNauW+qurlLr4FZDtTPTnlVMxp4eFg0i1MfURYiUmo=
Subject key identifier:   69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1A3D2EE29A2C50A0D5E0C61141B24
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 192.111.103.0/24
                          IP: 193.134.200.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:a3:d2:ee:29:a2:c5:0a:0d:5e:0c:61:14:1b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:65:88:e1:6b:c8:11:18:33:e0:05:52:c2:
                    97:5e:6e:5a:5d:82:65:ff:99:73:53:35:38:65:20:
                    15:d1:55:e9:0b:19:09:e9:4b:3e:52:4b:47:27:f9:
                    f1:dc:0d:e3:51:d0:75:e9:d9:24:c2:d2:f2:49:0d:
                    f3:bc:4b:0e:7e:91:78:eb:5d:c8:61:f8:12:78:22:
                    fa:03:78:96:d9:37:d0:03:e9:1e:db:a3:76:da:c8:
                    dd:34:18:66:d0:48:6d:8a:03:74:bd:fb:34:45:2f:
                    ac:cb:64:12:b2:f7:c4:9a:aa:3b:40:40:af:8f:5a:
                    00:38:5e:e0:42:b2:ef:76:34:06:43:4a:64:1a:a2:
                    e3:f2:24:7d:6f:f6:21:e7:cd:f4:01:09:97:ed:16:
                    c0:47:fa:7e:be:08:7b:7a:1b:8d:4a:46:ed:00:7f:
                    2b:d8:fc:eb:12:99:18:a1:62:43:a9:b2:e7:f6:a2:
                    40:e1:f3:9f:05:1a:48:53:0f:97:e7:51:36:ec:cf:
                    6f:3c:29:a9:58:75:54:c3:10:5b:5d:df:74:51:d3:
                    e6:04:51:f5:c8:02:19:36:49:59:18:d0:7a:b8:5f:
                    12:87:ba:9b:ad:c1:dd:63:8a:14:01:42:b0:6f:8b:
                    b7:30:bc:f1:7a:df:4d:5f:3b:75:07:4f:12:2c:60:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.103.0/24
                  193.134.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:cd:5e:56:24:49:bf:66:f0:88:db:07:f3:0c:5b:3c:40:94:
         39:9a:a7:e6:af:92:17:a7:f4:64:d7:dd:dc:9a:6c:f0:28:ec:
         82:8f:a9:20:6b:2e:ef:38:78:7c:a7:b8:63:6d:ec:37:79:3d:
         5a:13:30:ac:05:b5:f7:5b:5d:3b:db:bf:a4:4b:4c:dc:c3:9c:
         5d:9e:d3:f7:c2:44:89:95:c6:52:19:98:19:d8:8d:00:10:da:
         91:f2:b6:d3:a7:5a:f5:0b:9b:da:74:88:a1:14:93:79:1c:61:
         cb:91:54:b0:07:5e:5b:dd:ed:f4:c8:ef:18:d6:f6:16:9a:e4:
         7d:ec:32:91:26:44:f0:96:5a:10:9d:27:e1:96:39:80:f7:b0:
         46:24:33:83:7e:89:54:8e:a8:66:52:6a:d6:1d:57:58:6a:f9:
         99:e7:a6:96:64:57:9d:04:74:26:1e:9b:32:30:ab:14:e4:2a:
         f7:5a:d7:57:a6:fa:cf:fc:4c:18:98:a7:87:1b:26:8b:12:32:
         53:1b:4e:43:72:77:70:bf:d9:fc:84:35:73:c4:f5:30:fd:be:
         c7:fc:8c:33:40:f5:04:76:e9:b9:f9:84:8d:cf:6e:94:1d:eb:
         57:35:f5:98:2e:ff:1f:2b:f5:0a:35:77:3d:81:0a:19:57:73:
         d5:67:97:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----